@benjojo that sounds like a new business model to sell „verification“. Now that SSL/TLS certs are not a cashcow anymore.

@benjojo oh yes, there’s very good information available on that by @hanno :-)

https://berlin2024.mini.debconf.org/talks/17-breaking-dkim-and-bimi-with-the-2008-debian-openssl-bug/

(https://benjojo.co.uk/u/benjojo)

@benjojo my MNO sent some; the other ones i've seen are google OTP codes

(https://benjojo.co.uk/u/benjojo)

@benjojo (the "Verified" here i believe is just "this is a business RCS account" - out of interest, try "show details" on one of these? it should show something email-ish iwrc)

@puckipedia @benjojo The RCS business verification is done via Google’s Jibe services, most-likely. As Google’s Jibe is what carriers pay for to implement RCS (that’s why Google pushes RCS so hard).

Verification steps: https://developers.google.com/business-communications/rcs-business-messaging/guides/launch?model=xion

It’s so ripe for abuse Google had to shut it down in India: https://www.theverge.com/2022/6/1/23150243/google-rcs-ads-india-spam-verified-business

@benjojo BT is likely the service provider that runs the RCS service for your mobile, so they have to check the identity of the sender

@benjojo relatives send me RCS occasionally when they confuse the WhatsApp and the default messenger apps. It's fun to have all the "sophisticated messenger" functionality with basic messaging but imo it's too late to capture more users

@benjojo I can't remember whether I originally enabled it manually or if it happened on an upgrade, but after receiving only spam for a few weeks I disabled it again. I'm struggling to see the point in 2024 - though some sort of competent sender verification for SMS might be worth it, I suppose.